Skip to main content

CloudTrail



Resource Icon

Resource Overview

AWS CloudTrail allows you to monitor your AWS deployment in the cloud by retrieving a history of AWS API calls made through the AWS Management Console, AWS SDK, command-line tools, and higher-level AWS services. It also provides insights into which users and accounts called AWS APIs for CloudTrail-supported services, the source IP addresses of those calls, and the times when the calls occurred. You can integrate CloudTrail with your applications using APIs, automate the creation of trails for your organization, check trail status, and control how administrators enable and disable CloudTrail logging.

Associated Resources

Parent Resources

Connected Resources

Resource Setting Values

  • linked_s3_bucket_name: Name of the S3 bucket designated for publishing log files
  • s3_key_prefix: S3 key prefix that follows the name of the bucket you have designated for log file delivery
  • multi_region_enabled: Enable multi-region trail
  • global_service_events: Whether the trail is publishing events from global services such as IAM to the log files - true, false

Reference Materials